samba.git/python/samba/provision, branch master

s4/dlz: add support for bind 9.20

2025-12-10T22:46:11+00:00

bind dlz interface does not change much, yet we build
dlz_bind9_NN for every bind9 version NN we support -
despite many of them differ only in soversion, with
the code being identical.

For bind9_20, use dlz_bind9_18.so which we already have.

It'd be nice to extract actual bind9 version string in
sambadns.py and use it in more direct way.

Bug: https://bugzilla.samba.org/show_bug.cgi?id=15790

Signed-off-by: Michael Tokarev 
Reviewed-by: Douglas Bagnall 
Reviewed-by: Samuel Cabrero 

Autobuild-User(master): Douglas Bagnall 
Autobuild-Date(master): Wed Dec 10 22:46:11 UTC 2025 on atb-devel-224

schema: Add Validated-Write-Computer Extended Right from Windows Server 2016

2025-08-27T03:41:36+00:00

Signed-off-by: Jennifer Sutton 
Reviewed-by: Douglas Bagnall

python/provision: avoid SDDL conversion in set_dir_acl()

2025-03-19T14:58:32+00:00

This is not needed and has the potential to loose
information if the sddl code wouldn't have all features
implemented.

No intended change in behaviour.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=14927

Pair-Programmed-With: Stefan Metzmacher 

Signed-off-by: Ralph Boehme 
Signed-off-by: Stefan Metzmacher

provision: always use a large transaction index cache

2025-02-04T22:47:35+00:00

A larger cache costs more per transaction, but makes a large number
of operations within a transaction faster. We expect to be dealing
with the latter case here, regardless of the batch_mode parameter
and the database size. 200000 is chosen because it is also used in
join and schemaupgrade, and should be sufficient in most cases.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=15795

Signed-off-by: Douglas Bagnall 
Reviewed-by: Andrew Bartlett 

Autobuild-User(master): Douglas Bagnall 
Autobuild-Date(master): Tue Feb  4 22:47:35 UTC 2025 on atb-devel-224

python:provision: Do not suppress errors produced setting up BIND database

2024-08-04T00:32:39+00:00

Signed-off-by: Jo Sutton 
Reviewed-by: Douglas Bagnall

provision: Match Windows 2022 and set msDS-ExpirePasswordsOnSmartCardOnlyAccounts by default

2024-06-10T04:27:31+00:00

We do this by telling the Domain Functional Level upgrade code that
this is a new install.

Signed-off-by: Andrew Bartlett 
Reviewed-by: Jo Sutton

dsdb: Remove calls to ldb.set_opaque_integer()

2024-03-05T02:54:36+00:00

This routine will shortly be removed, it is now replaced by an
improved ldb.set_opaque()

Signed-off-by: Andrew Bartlett 
Reviewed-by: Jo Sutton

python/samba/provision: Ensure KDS root key is usable as soon as provision is complete

2024-03-05T02:54:36+00:00

We do this by setting the start time to being 10 hours 5min earlier
than now.

Signed-off-by: Andrew Bartlett 
Reviewed-by: Jo Sutton

provision: add a default root key

2024-03-01T00:19:45+00:00

Signed-off-by: Douglas Bagnall 
Reviewed-by: Andrew Bartlett

python: use python3 style super statements

2023-12-15T02:54:34+00:00

Signed-off-by: Rob van der Linde 
Reviewed-by: Douglas Bagnall 
Reviewed-by: Andrew Bartlett